PT-2007-7338 · Microsoft+1 · Iis+1

Publicado 2007-12-20 · Atualizado 2018-10-15 · CVE-2007-6504

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hosting Controller versions prior to 6.1 Hot fix 3.3

Description The issue allows remote authenticated users to modify the headers of arbitrary hosts. This is achieved by manipulating an unspecified parameter in the iibind.asp file of IIS.

Recommendations For versions prior to 6.1 Hot fix 3.3, update to a version later than 6.1 Hot fix 3.3 to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-6504

Produtos afetados

Hosting Controller

Iis

Referências · 8

• 🔥 http://securityfocus.com/bid/26862 · Exploit
• 🔥 https://exploit-db.com/exploits/4730 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39048 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6504 · Nota de Segurança
• http://secunia.com/advisories/28973 · Nota
• http://securityfocus.com/archive/1/485028/100/0/threaded · Nota
• http://securitytracker.com/id?1019222 · Nota
• http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html · Nota